Cisco Stealthwatch
Scalable visibility and security analytics across your business
Outsmart emerging threats in your digital business with industry-leading machine learning and behavioral modeling. Know who is on the network and what they are doing using telemetry from your network infrastructure. Detect advanced threats and respond to them quickly. Protect critical data with smarter network segmentation. And do it all with a solution that grows with your business.
Contact Cisco
Security analytics with Cisco Stealthwatch
Cisco Stealthwatch is the most comprehensive visibility and network traffic security analytics solution that uses enterprise telemetry from the existing network infrastructure. It provides advanced threat detection, accelerated threat response, and simplified network segmentation using multilayer machine learning and entity modeling. With advanced behavioral analytics, you’ll always know who is on your network and what they are doing.
A single, agentless solution allows visibility across the extended network, including endpoints, branch, data center, and cloud. And with Encrypted Traffic Analytics, Cisco Stealthwatch is the only product that can detect malware in encrypted traffic and ensure policy compliance, without decryption.
Security everywhere you need it
Stealthwatch is the only solution that detects threats across your private network, public clouds, and even in encrypted traffic.
Secure your cloud in Microsoft Azure
Reduce costs and complexity while securing your cloud environment in Azure.
A new approach to AWS security
Dynamic environments such as Amazon Web Services (AWS) need a rethinking of security.
Security for Google Cloud
In as little as 10 minutes, secure your Google Cloud Platform environments.
Cisco is a representative vendor in the first-ever Gartner Market Guide for the NTA (Network Traffic Analysis) market.
Features
Extend your network visibility (PDF)
Detect attacks that get past perimeter defenses across the digital business. Detect malicious patterns in encrypted traffic. No decryption is needed with our Encrypted Traffic Analytics technology and multilayer machine learning.
Speed up incident response and forensics (PDF)
Quickly detect zero-day malware, insider threats like command-and-control communications and data exfiltration, advanced persistent threats, and other sophisticated attacks. Store telemetry data for long periods. Use advanced analytics to conduct better investigations.
Simplify network segmentation (video 2:11)
Effectively segment the network. Use the Stealthwatch integration with Cisco Identity Services Engine (ISE) to create and enforce policies. And keep unauthorized users and devices from accessing restricted areas of the network.
Secure your data center (PDF)
Extend visibility and control to your data center, monitoring both north-south and east-west traffic. Add role-based monitoring and better network segmentation by using Stealthwatch with Cisco ISE and Cisco TrustSec.
Extend your visibility to the public cloud
Now you can achieve visibility and threat detection in the public cloud without the need for software agents. Cisco Stealthwatch Cloud is an easy SaaS-based solution for securing workloads in Amazon Web Services (AWS), Google Cloud Platform, and Microsoft Azure.
How we apply machine learning
Stealthwatch uses ML to analyze massive amounts of network data so you can take action on severe threats immediately.
Network traffic analysis: Why you need it
Learn what to look for in a network traffic analysis solution and the six capabilities you can't live without. Hear from Jon Oltsik about research conducted by Enterprise Strategy Group.
Learn more
Stealthwatch is the only solution that can detect malware in encrypted traffic without decryption.
Put your network visibility to the test
See what risks exist on your network with a free 2-week assessment.
Find these 7 blind spots (PDF)
If you can’t detect these activities, you are giving attackers a place to hide on your network.
Training and services
Optimize your Stealthwatch deployment with training, services, and support.
Product training
Get the most out of Stealthwatch. Use the learning opportunities available to you from the Stealthwatch Customer Success Learning Services team.
Professional services
Work with the Professional Services team to optimize your Stealthwatch deployment and meet specific business needs.
Customer support
Get assistance from our 24-hour Customer Support team to implement, troubleshoot, and maintain Stealthwatch.
Accelerate time to value
Enhance your user experience throughout the product lifecycle with Stealthwatch Services.
Engage. Learn. Expand your knowledge
The Stealthwatch Information Hub is your one-stop shop for dedicated Stealthwatch content.
Gain 120% ROI
Check out the cost savings and benefits of using Cisco Stealthwatch and the Cisco Identity Services Engine.
Visit the Stealthwatch Community
Join your peers and Cisco experts in the Cisco Stealthwatch community. Get valuable resources, ask questions, and share your expertise.
Related products and technologies
Cisco Threat Response
Learn how Cisco Threat Response automates integrations and accelerates detection, investigation, and remediation.
Cisco Identity Services Engine
Together, Stealthwatch and ISE deliver exceptional network visibility and control. (PDF)
Enterprise Network Security
Your network holds the key to defending your organization.
IoT Threat Defense
How secure are your IoT devices? Defend your business with Cisco's new IoT Threat Defense.Case studies
Insurance company improves incident response (PDF)
We needed improved situational awareness on our network as a whole, especially insight into our remote branch locations…. Stealthwatch has provided us insight into areas of our network that we did not previously have. Whenever I do an investigation, one of the first stops I make is to pull the flows for the assets in question from Stealthwatch.
-Jamison Budacki, Senior Information Security Architect, Erie Insurance
Elavon gains critical network visibility
When I walk into an organization and I know I need a basic understanding of what’s happened or [what’s] going on, Stealthwatch has always come through for me. ...Stealthwatch’s greatest asset for my team has been [that] when no one’s paying attention, Stealthwatch is in the background still watching.
-Phil Agcaoili, CISO, Elavon
Read what others say about Stealthwatch
Cisco Stealthwatch has increased visibility and detection of internal threats by at least 80% and has reduced incident response time by 90%. Really, a game changer for us to inspect internal traffic. Anything that “hits the wire.”
-Seth Price, IT Architect, Durham County Government
Stories from security experts
Ever wonder what experts find when they peer into your network? Check out these tales from the front lines.
News and events
Security Analytics for threat detection
Join our webinar as we discuss Security Analytics with a featured speaker from Forrester.
Gain visibility in your public cloud
Introducing Stealthwatch Cloud. Get started with a free 60-day trial.
Improve industrial security (PDF)
Cisco manufacturing security solutions empower OT with the ability to apply security policies and understand security context—while IT remains in ultimate control.
The Security Choice Enterprise Agreement has never been so flexible. It's easy to manage to help you respond faster to security challenges.
Resources
Data Sheets and Literature
Additional Resources
Support
For partners
Are you a Cisco partner? Log in to see additional resources.
Looking for a solution from a Cisco partner? Connect with our security technical alliance partners.